Skip to content

fix(sandbox): deny reads of Zero credential stores #3152

fix(sandbox): deny reads of Zero credential stores

fix(sandbox): deny reads of Zero credential stores #3152

Triggered via pull request August 2, 2026 09:31
Status Success
Total duration 9m 9s
Artifacts 1

ci.yml

on: pull_request
Performance Smoke
30s
Performance Smoke
Security & code health
2m 6s
Security & code health
Matrix: smoke
Fit to window
Zoom out
Zoom in

Annotations

20 errors and 5 warnings
Security & code health: internal/sandbox/runner.go#L442
unreachable func: sandboxEnvironmentForCommand
Security & code health: internal/sandbox/linux_helper.go#L247
unreachable func: linuxBwrapFilesystemArgs
Security & code health: internal/sandbox/linux_helper.go#L148
unreachable func: BuildLinuxSandboxBwrapArgs
Security & code health: internal/providers/factory.go#L116
unreachable func: NewTurnSessionProvider
Security & code health: internal/mcp/client.go#L77
unreachable func: Connect
Security & code health: internal/cron/store.go#L343
unreachable func: Store.Runs
Security & code health: internal/agenteval/trace.go#L36
unreachable func: MissingTraceEvents
Security & code health: internal/agenteval/trace.go#L32
unreachable func: TraceEventKeys
Security & code health: internal/agent/prompt_fingerprint.go#L196
unreachable func: ComputePrefixFingerprint
Security & code health: internal/agent/prompt_fingerprint.go#L31
unreachable func: buildPromptSubstrings
Smoke (windows-latest): internal/sandbox/linux_helper.go#L148
unreachable func: BuildLinuxSandboxBwrapArgs
Smoke (windows-latest): internal/sandbox/linux_helper.go#L109
unreachable func: ParseLinuxSandboxHelperArgs
Smoke (windows-latest): internal/sandbox/landlock_other.go#L9
unreachable func: ApplyLandlockFilesystemProfile
Smoke (windows-latest): internal/providers/factory.go#L116
unreachable func: NewTurnSessionProvider
Smoke (windows-latest): internal/mcp/client.go#L77
unreachable func: Connect
Smoke (windows-latest): internal/cron/store.go#L343
unreachable func: Store.Runs
Smoke (windows-latest): internal/agenteval/trace.go#L36
unreachable func: MissingTraceEvents
Smoke (windows-latest): internal/agenteval/trace.go#L32
unreachable func: TraceEventKeys
Smoke (windows-latest): internal/agent/prompt_fingerprint.go#L196
unreachable func: ComputePrefixFingerprint
Smoke (windows-latest): internal/agent/prompt_fingerprint.go#L31
unreachable func: buildPromptSubstrings
Performance Smoke
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security & code health
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smoke (macos-latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smoke (ubuntu-latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smoke (windows-latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
zero-performance-smoke
671 Bytes
sha256:4914e82f48d02aa54ec17e3f1a4ab4c7c8b26aa3eea4b7a202f806a7bcba8311